fix(dependabot): merge helm entries to fix overlapping dirs

[kriscoleman]

Summary

• Dependabot requires unique (package-ecosystem, directory) pairs — two helm entries with the same directories causes: "Update configs must have a unique combination of 'package-ecosystem', 'directory', and 'target-branch'. Ecosystem 'helm' has overlapping directories."
• Consolidates into a single helm entry with two groups using patterns / exclude-patterns to separate Replicated SDK updates from everything else
• Both groups now run weekly (Dependabot doesn't support per-group schedules)

UAT steps

1. Pre-merge validation (done): YAML lint passes, no anchors/aliases present, only one helm ecosystem entry so directory overlap is impossible
2. Post-merge: Confirm the .github/dependabot.yml check goes green on open PRs (e.g. feat(license-validation): add application example with custom field consumption and signature validation #138)
3. Within a week: Confirm Dependabot opens correctly grouped PRs (replicated-sdk vs all-other-deps)

🤖 Generated with Claude Code

[kriscoleman]

I'm tempted to update the dependabot trigger to trigger on this WIP branch for a full test... but at least its' passing yaml lint now

[adamancini]

@kriscoleman if you include a workflow_dispatch trigger, I think you could manually trigger the workflow to run against the test branch, and it should pick up your changes; as long as the workflow already exists on main, iirc.

[kriscoleman]

@kriscoleman if you include a workflow_dispatch trigger, I think you could manually trigger the workflow to run against the test branch, and it should pick up your changes; as long as the workflow already exists on main, iirc.

that's a good idea! 💡